netmon Build with net-libs/libsmi to load MIBs on the fly to decode SNMP packets Chroot into /var/lib/tcpdump when dropping privileges Drop privileges to tcpdump:tcpdump when run as root